Information We Collect
Account Information
When you create an account or sign in using Google OAuth, we collect:
- Name and email address - provided via Google OAuth
- Profile picture - from your Google account (optional)
- Account preferences - notification settings
DNS Query Data
When you perform DNS lookups, we collect:
- Domain names queried - the domains you look up
- Record types - A, AAAA, MX, CNAME, TXT, NS, etc.
- Query timestamp - when the lookup was performed
- IP address - for rate limiting and security
Cookies and Local Storage
We use cookies and browser local storage to:
- Maintain your login session
- Remember your preferences
- Store recent queries for convenience
How We Use Your Information
We use the information we collect to:
- Perform DNS lookups - query global DNS servers on your behalf
- Display propagation status - show results on our interactive map
- Provide query history - for Pro users to review past lookups
- Manage your account - authentication, preferences, subscriptions
- Improve our service - analyze usage patterns, optimize performance
- Process payments - manage subscriptions through Stripe
Lawful Basis for Processing
We process your personal data under the following lawful bases as defined in GDPR Article 6:
- Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or enabling analytics cookies.
- Contract (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you, including providing our services, managing your account, and processing payments.
- Legitimate Interest (Article 6(1)(f)): Where processing is necessary for our legitimate interests, such as improving our services, ensuring security, and preventing fraud, provided these interests are not overridden by your rights.
- Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with applicable laws, regulations, or legal proceedings.
Data Storage and Security
Your data is stored securely using Amazon Web Services (AWS) infrastructure:
- Encryption in transit - All data transmitted using TLS/HTTPS
- Encryption at rest - Data stored with AES-256 encryption
- Access controls - Strict authentication and authorization
- US-based servers - Data stored in AWS US-East-1 region
Data Retention
Query history is retained as long as your account is active. Free users may have limited history. You can request account deletion at any time.
Third-Party Services
We use trusted third-party services to operate DNS Dingo:
Stripe (Payment Processing)
Stripe processes all payments securely. We never store your credit card information. Stripe's privacy policy: stripe.com/privacy
Google OAuth (Authentication)
We use Google for secure sign-in. Google's privacy policy: policies.google.com/privacy
Web3Forms (Contact Forms)
Contact form submissions are processed through Web3Forms. Their privacy policy: web3forms.com/privacy
Third-Party DNS Servers
We query public DNS servers worldwide to check propagation. These are standard DNS queries and do not include personal information.
We Do Not Sell Your Data
We never sell, rent, or share your personal information with third parties for marketing purposes.
Your Rights
You have the following rights regarding your personal data:
- Access - Request a copy of your personal data
- Correction - Request correction of inaccurate data
- Deletion - Request deletion of your account and data
- Export - Request your data in a portable format
To exercise these rights, please contact us through our support page.
Children's Privacy
DNS Dingo is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification for material changes
Your Data Access Rights
Under GDPR, you have the following additional rights:
- Right of Access: You have the right to request a copy of all personal data we hold about you. We will respond to your request within 30 days.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Data Protection Officer
For any questions regarding our data practices or to exercise your privacy rights, please contact our Data Protection Officer:
- Email: privacy@snapitsoftware.com
- Company: SnapIT Software LLC
- Response Time: We will respond to all data protection inquiries within 30 days.
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our servers and service providers are located. When we transfer your data internationally, we implement appropriate safeguards including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Ensuring our service providers maintain adequate data protection measures
- Processing data in compliance with applicable data protection laws
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: